CVE-2026-68580
FreeRDP before 3.29.0 Integer Overflow via Audio Input Channel
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel (audin) across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing allocation size wraparound, resulting in heap-based buffer overflow on ALSA or denial of service on all platforms.
| CWE | CWE-122 |
| Vendor | freerdp |
| Product | freerdp |
| Published | Aug 2, 2026 |
| Last Updated | Aug 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for freerdp freerdp
Be the first to know when new high vulnerabilities affecting freerdp freerdp are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
FreeRDP / FreeRDP
0 < 3.29.0
References
Credits
🔍 canomer